Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.mft
File: AoXs_ogqAqGVABRSSDMybJ7V0D0.mft (raw, json)
Hash identifier: n3jfilWqJpt9HSgYOkMPRlW5Q6eSxfGvn5/hUmIfgGQ=
Subject key identifier: 51:EC:84:61:A4:09:59:6C:AE:91:C0:EE:7D:76:A4:18:B5:7E:FA:FB
Authority key identifier: 02:85:EC:FE:88:2A:02:A1:95:00:14:52:48:33:32:6C:9E:D5:D0:3D
Certificate issuer: /CN=0285ecfe882a02a1950014524833326c9ed5d03d
Certificate serial: 01A0E73F9FCE9CA6CD37B933D4958886A9E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoXs_ogqAqGVABRSSDMybJ7V0D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.mft
Manifest number: F1
Signing time: Mon 28 Sep 2026 09:01:41 +0000
Manifest this update: Mon 28 Sep 2026 09:01:41 +0000
Manifest next update: Tue 29 Sep 2026 09:01:41 +0000
Files and hashes: 1: AoXs_ogqAqGVABRSSDMybJ7V0D0.crl (hash: lEJ4bV/RtC0zOr64AcXVETaJJtcjPKTc3VQybACzZJ4=)
2: gELtUXmcMpXkfU-ruzwBQq4A7Jw.asa (hash: 24wkmPQWoqZNRgCVS5rExhMXF8yP0+BcQiBXM5iYW9Q=)
3: iYTyASUWDKAaro_VtHzd5V1NW_k.asa (hash: 2dfsEYfXwhAKl0La6hBxTYJuJnYLE7CaYUYv30nw4zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoXs_ogqAqGVABRSSDMybJ7V0D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:9f:ce:9c:a6:cd:37:b9:33:d4:95:88:86:a9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0285ecfe882a02a1950014524833326c9ed5d03d
Validity
Not Before: Sep 28 09:01:41 2026 GMT
Not After : Sep 29 09:01:41 2026 GMT
Subject: CN=51ec8461a409596cae91c0ee7d76a418b57efafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:c5:8a:6f:f5:ff:86:db:f2:ab:6e:5e:39:
ff:bc:7e:08:9d:57:ad:34:34:c5:44:52:3f:5d:55:
41:05:c9:cd:1b:84:94:d2:81:22:06:73:a1:dc:9d:
9f:2f:87:1f:7b:c8:7f:e3:1f:43:ae:b7:3a:07:7d:
13:37:57:b0:01:b6:78:f6:7b:04:92:03:01:b7:9a:
d6:39:0e:ad:85:e2:12:7b:04:59:58:41:98:35:36:
c8:e0:b5:fb:5f:73:75:c7:5a:be:d0:c9:83:94:e3:
76:b7:6d:e7:d6:34:59:e9:d9:f6:b8:b8:48:cf:f4:
a4:94:89:cd:f2:d3:f0:4f:26:de:f2:0c:13:83:ee:
b1:d3:99:9a:84:e9:70:2b:c1:6b:6f:0b:f4:86:38:
60:eb:54:b2:ab:50:a4:59:66:eb:a2:c5:d0:cb:da:
73:d6:1a:f1:1b:92:58:c8:11:ca:60:ba:64:ee:ba:
6a:e5:97:7e:8f:8f:a5:1d:91:f9:37:ae:5b:f2:5a:
c3:3d:b8:bc:df:db:f6:8c:6d:87:ac:14:f2:42:e1:
32:ee:1d:db:a7:f6:56:49:a0:24:44:5b:12:75:86:
47:ba:cc:0f:c4:92:29:8f:d6:01:34:5e:87:0c:3b:
07:d3:82:cb:8e:3f:56:a2:c9:ae:6d:ed:d6:fb:63:
45:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EC:84:61:A4:09:59:6C:AE:91:C0:EE:7D:76:A4:18:B5:7E:FA:FB
X509v3 Authority Key Identifier:
keyid:02:85:EC:FE:88:2A:02:A1:95:00:14:52:48:33:32:6C:9E:D5:D0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoXs_ogqAqGVABRSSDMybJ7V0D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/AoXs_ogqAqGVABRSSDMybJ7V0D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:49:a8:0c:bf:0e:c9:ec:18:0d:eb:7c:aa:73:08:f1:7a:19:
cf:66:95:fd:7c:08:9d:b2:12:52:82:7b:f3:28:f6:6f:93:29:
5a:28:3a:d2:cb:c7:8d:f9:6f:ff:cf:bc:04:c9:dc:c2:60:5e:
d1:98:b8:de:c8:5f:2a:f0:cd:da:01:c2:3b:5f:ec:a5:c9:c9:
9e:be:5c:ed:03:e4:c1:f8:34:ef:ec:1a:70:77:f0:ed:57:7a:
33:f6:58:5a:c3:c4:81:f8:fa:3a:04:16:c6:01:ae:81:a3:7d:
da:1a:65:4b:50:db:0e:6e:d8:c0:79:c5:d9:b9:3f:82:ee:6c:
08:10:a0:5a:bb:5b:e4:9f:03:59:73:d1:fc:78:55:56:07:cf:
e7:23:11:58:52:d6:fb:c5:7f:24:08:e1:e2:3c:0e:fd:4e:72:
a8:6b:fd:6f:9a:d6:5f:f6:24:0e:ff:8e:03:33:d1:0b:e2:20:
1e:65:48:80:d9:53:a2:d5:bb:61:d0:b4:13:b9:2c:cc:1a:36:
ab:55:43:0d:a0:95:be:c1:a9:86:8f:92:1e:4d:57:76:31:68:
07:be:26:d4:41:9f:a8:6e:b4:cc:58:43:30:5b:dd:93:51:21:
93:58:96:59:78:2a:e4:02:34:61:1e:e5:12:6c:68:a0:41:18:
81:8a:69:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:33:26 2026 by rpki-client